Examkin

Question

Difficulty: MediumAzure Policy

An organization needs to prevent the accidental deletion of critical production databases. Is Azure Policy the primary Azure tool used to meet this requirement?

Answer: Answer

Answer

Azure Policy is not the primary tool used to prevent the deletion of resources; Resource Locks should be used instead.
Azure Policy is designed to evaluate resource configurations and enforce compliance standards (such as ensuring resources have specific tags or are deployed in allowed regions). It does not prevent the deletion of resources. Resource Locks are the dedicated Azure feature used to prevent accidental deletion or modification of resources.

Step-by-Step Solution

1
Analyze the requirement of preventing the deletion of resources.
Identify that the goal is to block deletion actions on resources like databases.
Understanding the specific governance requirement is necessary to choose the correct tool.
2
Evaluate the capabilities of Azure Policy.
Azure Policy enforces configuration rules (e.g., allowed locations, required tags) during resource creation or update. It does not prevent resource deletion.
To verify if Azure Policy is the correct service for the task.
3
Identify the correct Azure service for preventing resource deletion.
Resource Locks (specifically the CanNotDelete lock) are designed to prevent users from deleting critical resources.
To determine the correct tool and confirm that the statement is false.

Key Concept

Azure Policy focuses on resource configuration compliance, whereas Resource Locks prevent resource deletion or modification.
Estimated Time:1m 0s
Rate this question

Topics

Azure Policy

More questions from this topic